# BabelStrike

> Transliterate non-Latin names and generate username wordlists for security assessments

BabelStrike is a Python CLI tool created for penetration testers and red teams to romanize scraped full names and words written in non-English scripts. It maps international alphabets into Latin characters and outputs standard enterprise username permutations. This helps testers create accurate targeting lists from scraped sources like LinkedIn when testing multinational organizations.

Website: https://github.com/t3l3machus/BabelStrike

## What it is for

- Convert scraped international employee names into Latin username wordlists
- Transliterate non-English web spidering wordlists (e.g., from CeWL) into Latin equivalents
- Generate username permutations with custom domain prefixes for credential spraying attacks
- Test reversed name order variations for non-Western naming conventions

## Features

- Transliterates multiple non-Latin and accented alphabets (including Greek, Hindi, Spanish, French, Polish, Danish, Portuguese, and Hungarian)
- Automatic language detection for input text files
- Generates common enterprise username formats with configurable separators (periods, underscores, hyphens)
- Handles middle names in username permutations
- Reverses name order testing via the -a flag
- Appends Active Directory domain prefixes (e.g., DOMAIN\user)
- Extensible language support through custom character substitution mapping classes

## Pricing

Open source. Free (CC BY-NC 4.0)

## Details

- Type: GitHub repo
- Category: [Development](https://xiry.app/topics/development.md)
- Open source: yes
- Platforms: Command line, Linux
- For: Penetration testers and red team operators
- Alternative to: username-anarchy, namemash
- Tags: pentesting, red team, osint, wordlists, transliteration, cli

## Why it was saved

- [@d3ndr1t30x, 4 January 2024](https://www.instagram.com/reel/C1rEw8orRxZ/): It automates the romanization and username permutation process for international target name lists (e.g., Greek, Hindi/Devanagari, Cyrillic) when conducting credential spraying or brute-force attacks.

## Related

- [Argus](https://xiry.app/resources/argus): Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks (GitHub repo, Open source)
- [holehe](https://xiry.app/resources/holehe): Check if an email address is registered across 120+ online platforms. (GitHub repo, Open source)
- [OpenOSINT](https://xiry.app/resources/openosint): AI OSINT agent, MCP server, and framework chaining intelligence tools (GitHub repo, Open source)
- [VoidAccess](https://xiry.app/resources/voidaccess): Self-hosted dark web OSINT tool for automated threat intelligence. (Desktop app, Open source)
- [agent-browser](https://xiry.app/resources/agent-browser): Browser automation CLI and engine purpose-built for AI agents (GitHub repo, Open source)
- [Boneyard](https://xiry.app/resources/boneyard): Auto-generates pixel-perfect skeleton screens directly from your real rendered DOM (GitHub repo, Open source)

Updated 3 October 2026. Page: https://xiry.app/resources/babelstrike

Make your own library: Xiry takes your saved reels, tweets, Reddit bookmarks and Watch Later videos, makes them searchable and pulls the useful stuff out, like this library. It's invite-only for now; join the waitlist at https://xiry.app/#waitlist.